Getting logged out over HTTPS when uploading profile images

  • Resolved nocabt

    (@nocabt)


    7 years, 3 months ago

    Our site enforces HTTPS, and users who tried to upload a new profile picture are getting logged out. In Chrome Developer tools network tab, I saw that async-upload.php was getting redirected to wp-login.php, and the image upload was failing with error, “An error occured in the upload. Please try again later.”

    Upon investigation, I found that line 219 of user/class-user-action.php contained:

    $login_user = @wp_signon($creds, false);

    According to the Codex:

    https://codex.ww.wp.xz.cn/Function_Reference/wp_signon

    false means to NOT use a secure cookie. Changing that value to true fixed the issue for us.

    This seems like a bug that should be fixed, no? We are running WordPress 5.1 and WP User 5.9.3.

    Thanks!

    • This topic was modified 7 years, 3 months ago by nocabt.
    • This topic was modified 7 years, 3 months ago by nocabt.
    • This topic was modified 7 years, 3 months ago by nocabt.
    • This topic was modified 7 years, 3 months ago by nocabt.
Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Prashant Walke

    (@walkeprashant)

    7 years, 3 months ago

    Hi,

    Thank you very much for let us know issue as well as solution in detail.

    We greatly appreciate your efforts and your helpful comment.

    We will tack care issue soon and release updated version.

    Plugin Author Prashant Walke

    (@walkeprashant)

    7 years, 3 months ago

    Hi,

    We have RELEASE NEW VERSION 6.0 WP USER

    With this release,

    • Extends the WP REST API using JSON Web Tokens Authentication as an authentication method. Authorize your REST API requests so that you can create, update and delete your data. – Documentation
    • Resolved issue : JQuery UI CSS is enqueued over HTTP, instead of HTTPS
    • Resolved issue : Getting logged out over HTTPS when uploading profile images

    Check following link for more information :
    https://wpuserplus.com/blog/release-new-version-6-0-wp-user/

    Please check and let us know in case any issue.

    Thanks for your valuable feedback and suggesstion.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Getting logged out over HTTPS when uploading profile images’ is closed to new replies.